Package io.camunda.zeebe.engine.state.authorization

Class DbAuthorizationState

java.lang.Object

io.camunda.zeebe.engine.state.authorization.DbAuthorizationState

All Implemented Interfaces:

AuthorizationState, MutableAuthorizationState

public class DbAuthorizationState
extends Object
implements AuthorizationState, MutableAuthorizationState

Constructor Summary

Constructors

Constructor	Description
DbAuthorizationState(ZeebeDb<ZbColumnFamilies> zeebeDb, TransactionContext transactionContext)

Method Summary

Modifier and Type	Method	Description
void	createOrAddPermission(long ownerKey, AuthorizationResourceType resourceType, PermissionType permissionType, List<String> resourceIds)	Checks if a Permission exists for the provided ownerKey, resourceType and permissionType.
Optional<AuthorizationOwnerType>	getOwnerType(long ownerKey)
ResourceIdentifiers	getResourceIdentifiers(Long ownerKey, AuthorizationResourceType resourceType, PermissionType permissionType)
void	insertOwnerTypeByKey(long ownerKey, AuthorizationOwnerType ownerType)	Stores the owner type for a new owner in the state.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

DbAuthorizationState

public DbAuthorizationState(ZeebeDb<ZbColumnFamilies> zeebeDb,
 TransactionContext transactionContext)

Method Details

createOrAddPermission

public void createOrAddPermission(long ownerKey,
 AuthorizationResourceType resourceType,
 PermissionType permissionType,
 List<String> resourceIds)

Description copied from interface: MutableAuthorizationState

Checks if a Permission exists for the provided ownerKey, resourceType and permissionType. If it does, adds the resourceIds to this entry. If it does not, creates a new Permission with the provided resourceIds.

Specified by:

createOrAddPermission in interface MutableAuthorizationState

Parameters:

ownerKey - the key of the owner of the permissions. This could be a userKey, a roleKey or a groupKey

resourceType - the type of resource the permissions are for (Eg. Process definition, Job)

permissionType - The type of permission being granted (Eg. READ, WRITE)

resourceIds - A list of resourceIds the permissions are granted for (Eg. bpmnProcessId:foo, *)

insertOwnerTypeByKey

public void insertOwnerTypeByKey(long ownerKey,
 AuthorizationOwnerType ownerType)

Description copied from interface: MutableAuthorizationState

Stores the owner type for a new owner in the state.

Specified by:

insertOwnerTypeByKey in interface MutableAuthorizationState

Parameters:

ownerKey - the key of the owner

ownerType - the type of the owner

getResourceIdentifiers

public ResourceIdentifiers getResourceIdentifiers(Long ownerKey,
 AuthorizationResourceType resourceType,
 PermissionType permissionType)

Specified by:

getResourceIdentifiers in interface AuthorizationState

getOwnerType

public Optional<AuthorizationOwnerType> getOwnerType(long ownerKey)

Specified by:

getOwnerType in interface AuthorizationState